2001

Directory traversal vulnerability in view_item CGI program in sglMerchant 1.0 allows remote attackers to read arbitrary

The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the re

D-Link DI-704 Internet Gateway firmware earlier than V2.56b6 allows remote attackers to cause a denial of service (reboo

Marconi ForeThought 7.1 allows remote attackers to cause a denial of service by causing both telnet sessions to be locke

Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into

POP3Lite before 0.2.4 does not properly quote a . (dot) in an email message, which could allow a remote attacker to appe

BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and

HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could

qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for

htsearch program in htDig 3.2 beta, 3.1.6, 3.1.5, and earlier allows remote attackers to determine the physical path of

Performance Metrics Collector Daemon (PMCD) in Performance Copilot in IRIX 6.x allows remote attackers to cause a denial

PSCOErrPage.htm in Netscape PublishingXpert 2.5 before SP2 allows remote attackers to read arbitrary files by specifying

Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformatio

Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a flood of packets to port 26

Cisco IOS 11.x and 12.0 with ATM support allows attackers to cause a denial of service via the undocumented Interim Loca

glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a LIST command with an argument t

Directory traversal vulnerability in ACI 4d webserver allows remote attackers to read arbitrary files via a .. (dot dot)

Cross-site scripting (CSS) vulnerability in gnut Gnutella client before 0.4.27 allows remote attackers to execute arbitr

Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its pas

Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses a small keyspace for device keys and does not impose a d

Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via mul

Web-based configuration utility in Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap binds itself to port 80 e

qpopper 4.01 with PAM based authentication on Red Hat systems generates different error messages when an invalid usernam

Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra /

Webridge PX Application Suite allows remote attackers to obtain sensitive information via a malformed request that gener

PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with suff

UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read th

Respondus 1.1.2 for WebCT uses weak encryption to remember usernames and passwords, which allows local users who can rea

Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service (h

ZoneAlarm and ZoneAlarm Pro allows a local attacker to cause a denial of service by running a trojan to initialize a Zon

Directory traversal vulnerability in index.php in PhpMyExplorer before 1.2.1 allows remote attackers to read arbitrary f

KTH Kerberos IV and Kerberos V (Heimdal) for Telnet clients do not encrypt connections if the server does not support th

Remote manager service in Website Pro 3.0.37 allows remote attackers to cause a denial of service via a series of malfor

APC Web/SNMP Management Card prior to Firmware 310 only supports one telnet connection, which allows a remote attacker t

Directory traversal vulnerability in the web server for (1) Elron Internet Manager (IM) Message Inspector and (2) Anti-V

Hughes Technologies Virtual DNS (VDNS) Server 1.0 allows a remote attacker to create a denial of service by connecting t

Spytech Spynet Chat Server 6.5 allows a remote attacker to create a denial of service (crash) via a large number of conn

Alt-N Technologies MDaemon 3.5.4 allows a remote attacker to create a denial of service via the URL request of a MS-DOS

Gordano NTMail 6.0.3c allows a remote attacker to create a denial of service via a long (>= 255 characters) URL request

Anaconda Partners Clipper 3.3 and earlier allows a remote attacker to read arbitrary files via a '..' (dot dot) attack i

Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 (VVOS) with VirtualVault A.04.00 allows a remote attacker to crea

McAfee Remote Desktop 3.0 and earlier allows remote attackers to cause a denial of service (crash) via a large number of

Omnicron Technologies OmniHTTPD Professional 2.08 and earlier allows a remote attacker to create a denial of service via

Directory traversal vulnerability in MIMAnet viewsrc.cgi 2.0 allows a remote attacker to read arbitrary files via a '..'

Centrinity First Class Internet Services 5.50 allows for the circumventing of the default 'spam' filters via the presenc

Directory traversal vulnerability in Sun Chili!Soft ASP on multiple Unixes allows a remote attacker to read arbitrary fi

Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files vi

BadBlue Personal Edition v1.02 beta allows remote attackers to read source code for executable programs by appending a %

Vulnerability in cgiWebupdate.exe in Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.5.2 through 3.5.4 all

Buffer overflow in A-V Tronics Inetserv 3.2.1 and earlier allows remote attackers to cause a denial of service (crash) i